Review a privacy assessment

Review a privacy assessment after the business user submits it. You can either close the assessment after a review or request a revision if you determine that the assessment requires more information.

Before you begin

Role required: sn_privacy.analyst

About this task

As a reviewer, you can preview the assessment with the applicable risk statements, information objects, and control objectives.

After a business user submits a privacy assessment, it moves to the Review state. As the assigned analyst, you can perform the following actions on it:

• Review the relationships added to a hierarchy by the business user.

• Review the data transfer records generated from hierarchy relationships and remove those that aren’t applicable.

• Request a revision of the assessment.

• Mark the assessment as complete.

Procedure

1. Navigate to Workspaces > Privacy Workspace.

2. Select the Tasks icon [Omitted image "icon-tprm-ws-tasks.png"] Alt text:.

3. In the My pending tasks tab, select Privacy assessments.

4. Open the assessment to be reviewed.

5. To review the hierarchy relationships defined by the business user, navigate to the Hierarchy tab.

   This displays the relationships between the primary node and each of its related nodes.

   To see the locations and data elements scoped to each data subject type involved in a particular transfer, select Cell actions, then select View details in the Data subjects involved column.

6. To review the data transfers generated from the hierarchy relationships, navigate to the Data transfers tab.

   This lists the data transfer records created for each movement of personal data. For more information, refer to Manage data transfers.

   If one or more data transfers aren't relevant to the processing activity, select the record(s), and select Remove.

7. To view the records added through smart assessment automation rules, navigate to the Applicable scope tab.

   For AI-assisted recommendations based on assessment responses, see AI reviewer assist for privacy assessment tasks.

8. To request more information from the responder, select Request for revision.

9. Mark the assessment as complete.

   1. Select Update state.

   2. In the State field, select Closed complete.

   3. In the Additional comments field, provide any additional information.

   4. Select Submit.

Result

• The corresponding controls and risks for the records in Applicable scope are automatically scoped to the processing activity.

• The hierarchy relationships are mapped to the processing activity. You can manage these relationships or add new ones directly from the processing activity record by navigating to Processing data inventory > Hierarchy. For steps, see Add relationships to a hierarchy for a processing activity.

• The data transfers are mapped to the processing activity. You can manage data transfers directly from the processing activity record by navigating to Regulatory details > Data transfers. For details, see Manage data transfers.

What to do next

Data transfer records generated from hierarchy relationships require a transfer mechanism. To add one, see Add a transfer mechanism to a data transfer record.

Parent Topic:Using Privacy Management